Extracted

• • Target

    53d1fe3209497d194e38201deb835924.exe

  • Size

    2.1MB

  • MD5

    53d1fe3209497d194e38201deb835924

  • SHA1

    43f4315a82d7cd359aec38eac9fa37602d8baac6

  • SHA256

    af0249150bee4fec74c124f89019cd260c9aacd7b7a7715192b5097f1948eb82

  • SHA512

    a706c677811bc7b5b0368c840c00499b45c3f30e3b52350373e4475bfe90c8bfceee57100d28dece8ec3006382a0be5a8ae780e1c1d71acf43208301200128a2

  Score

  10^/10

  remcospersistencerat

  • Remcos

    Remcos is a closed-source remote control and surveillance software.

    ratremcos

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2